University of Sunderland Professionalism and Personal Skills Unit 11 Professionalism and Personal Skills Computer Legislation.

University of Sunderland

Professionalism and Personal Skills Unit 11

Professionalism and Professionalism and Personal SkillsPersonal Skills

Computer Legislation




• We will also consider the main pieces of legislation relating to computing:– Computer Misuse Act 1990

– Data Protection Act 1998

– Regulation of Investigatory Powers Act 2000

– Freedom of Information Act 2000

– Copyright and Patents




Computer Misuse

• Definitions of Computer Crime

• Edwards and Savage (IT and the Law)




Background

• Frequency of Computer Misuse

• The Offenders

• The Costs of Computer Crime




The Computer Misuse Act • Types of Computer Crime • 1 Fraud

• 2 Misuse of Resources

• 3 Sabotage, Arson & Vandalism

• 4 Blackmail




The Computer Misuse Act (cont)• Objectives

• The Act itself – Offences – User Responsibilities – Enforcement




The Computer Misuse Act (cont)• Provisions of the Act • Three New Offences

– 1 The Unauthorised Access Offence – 2 The Ulterior Intent Offence – 3 The Unauthorised Modification Offence

• Comments on the Act




Data Protection Act 1998• The Act in Perspective • Background • The 8 Principles • How the Act works • Data Subjects Rights




Data Protection Act in Perspective

Organisations

Information Computers

• Why we need legislation




Data Protection Act in Perspective• Data Privacy

Privacy Protection

Data Privacy




The Act • What is it? • Purposes of the Act • Definitions used in the Act (Full details see DPC's guidelines):

– 1 Data – 2 Personal Data – 3 Data Subject– 4 Data Controller – 5 Data Processor – 6 Processing – 7 Relevant Filing System




The 8 Principles of the DPA • There are eight principles to the data protection

act - which should already be good practice –– 1 Personal data shall be processed fairly and

lawfully.– 2 Personal data shall be obtained only for one

or more specified and lawful purposes. – 3 Personal data shall be adequate, relevant and not

excessive.





act - which should already be good practice –– 4 Personal data shall be accurate and, where

necessary, kept up to date – 5 Personal data processed for any purpose…shall

not be kept for longer than is necessary – 6 Personal data shall be processed in accordance

with the rights of data subjects under this Act





act - which should already be good practice –– 7 Appropriate technical and organisational

measures shall be taken against unauthorised or unlawful processing of personal data.

– 8 Personal data shall not be transferred to a country or territory outside the EEA.




How the Act Works The Commissioner

• Data Protection Commissioner • Data User Registration • Data Users Obligations • Enforcement and Appeals



Professionalism and Professionalism and Personal SkillsPersonal SkillsHow the Act Works

Notification

• Notification information




How the Act Works • Exemptions (5 main sections)• There are a number of exemptions, the main

ones being –– National security – Crime and taxation – Health, education and social work – Regulatory activity – Special purposes




How the Act Works • Data Subject Rights

– 1 The right of access

– 2 The right to prevent processing

– 3 The right to compensation




– Regulation of Investigatory Powers Act 2000

– Freedom of Information Act 2000




Copyright• Introduction

• Protection

• Getting a Copyright

• Length




Patents• Introduction

• Protection

• Getting a Patent

• Length




Enforcing Patents and Copyright Introduction

• Federation Against Software Theft/ European Leisure Software Publishers Association

• Powers • Law Suits




Summary • Computer Misuse • Background • The Computer Misuse Act • Copyright, Patents, etc • Summary • Further Reading




Overview • In this lecture we have discussed computer

crime.• We have also looked at and gives an overview

of the main pieces of legislation relating to computing:

• Computer Misuse Act 1990

• Data Protection Act 1998

University of Sunderland Professionalism and Personal Skills Unit 11 Professionalism and Personal Skills Computer Legislation.

Documents

personal data

personal skills unit

act slide

act definitions

data processor

data controller

data subjects rights

freedom of information